Dockerfile.test

# Dockerfile.test - Python-only test environment matching CI
#
# Lightweight image for running unit + guardrail tests.
# No R, no Node.js — Python dependencies only.
#
# Build: DOCKER_BUILDKIT=1 docker build -f Dockerfile.test -t foundation-plr-test .
# Run:   docker run --rm -e MPLBACKEND=Agg foundation-plr-test
#
# =============================================================================

# --- Builder stage: install Python deps ---
# Pinned 2026-02-13 for reproducibility (TRIPOD-Code area B)
FROM python:3.11-slim-bookworm@sha256:067222884359a2476ff344f92278df8fbe4792b7cf1a43d82d4a98befe8f89fb AS builder

RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential git libgomp1 && rm -rf /var/lib/apt/lists/*

# Pinned 2026-02-13 for reproducibility
COPY --from=ghcr.io/astral-sh/uv:0.9@sha256:e96d483a9ed7924d2acf01bdd1d537d0d5e6d8f21b74fff3373005f6c9446696 /uv /usr/local/bin/uv
WORKDIR /project
COPY pyproject.toml uv.lock ./

ENV UV_PROJECT_ENVIRONMENT=/opt/venv
RUN --mount=type=cache,target=/root/.cache/uv \
    uv venv /opt/venv && uv sync --frozen --dev

# --- Final stage: slim runtime ---
# Pinned 2026-02-13 for reproducibility (TRIPOD-Code area B)
FROM python:3.11-slim-bookworm@sha256:067222884359a2476ff344f92278df8fbe4792b7cf1a43d82d4a98befe8f89fb

RUN apt-get update && apt-get install -y --no-install-recommends \
    git libgomp1 && rm -rf /var/lib/apt/lists/*

# Pinned 2026-02-13 for reproducibility
COPY --from=ghcr.io/astral-sh/uv:0.9@sha256:e96d483a9ed7924d2acf01bdd1d537d0d5e6d8f21b74fff3373005f6c9446696 /uv /usr/local/bin/uv
COPY --from=builder /opt/venv /opt/venv

ENV VIRTUAL_ENV=/opt/venv PATH="/opt/venv/bin:$PATH"
ENV PYTHONPATH=/project/src PREFECT_DISABLED=1 MPLBACKEND=Agg

WORKDIR /project
COPY pyproject.toml uv.lock Makefile renv.lock .Rprofile ./
COPY .gitignore AGENTS.md ARCHITECTURE.md ./
COPY .github/ .github/
COPY src/ src/
COPY tests/ tests/
COPY configs/ configs/
COPY scripts/ scripts/
COPY docs/ docs/
COPY data/r_data/ data/r_data/
COPY data/public/ data/public/

RUN mkdir -p figures/generated

CMD ["python", "-m", "pytest", "tests/", "-m", "unit or guardrail", \
     "--ignore=tests/test_docker_r.py", "--ignore=tests/test_docker_full.py", \
     "-n", "auto", "-v", "--tb=short"]